News for hackers. Stuff that matters.
Re:mCaptcha – Proof of work based, privacy respecting CAPTCH... by nextaccountic on Thursday August 04, 2022 @01:04PM (#32345491)
You can and should use multiple kinds of rate limiters
Re:mCaptcha – Proof of work based, privacy respecting CAPTCH... by mort96 on Thursday August 04, 2022 @03:49PM (#32347451)
"Can" is true, and a good point. "Should" is a bit more dubious though; if IP-range-based rate limiting is enough, not wasting your users' battery with PoW-based rate limiting seems like a good thing. It seems like a potentially useful tool in your tool belt, which you should probably only deploy if IP-address-based rate limiting proves to be not enough.